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y - 9 fcjimm tfcox, 

&Xt)^Wi\ziL^XXt>£frtz'%U<7*-9t. f£|g2 
/'y^-^ feffitki&^mz X o Tiift£j& $ fr 5 =8-^2 
— *«*| t K.&3i BrJS©#ifcK: J: o tSffl 

IWEW-JI^&fc. i o Tii&ff-g $ *K # bfrtzWmWfr 

©^K^tu^h^&^S&^ai: , *2^7/— * 
©, !£&^*aa©mjl23l 1 

s£i£iSc#iaf-.E 1/ ^ tt 5 jS^wgB^ 7^-^^A 

wit £ iftftit 5 1 1 at #a t »• 
hmwmmw^^L., z<o^Ltzwmw^M^-r 

%m 2 /<? * -^^M^BK^i&lc «fc o Tl^&tfcMagBfT 



ajBi^ 5 * - ffeffit* x xm2s< v * - 9 m&**fr? 
frm^mtoftiu* vt-pisxum^? tfcfc 

[»*J14 ] t??iJ»c i 9 «:«lM-5i4: 
sm#at. 

CO, /<7>-^K*SfJ)ot, S^lt^fef 

li!2/<7> — * abSl/Mi-ttufeM^O^^.^ — ^ 

&&m&m\cm^^bfr?>ftm<D—m£-?h?>$fi2/*7* 

5^2^7^-^^SrmilEffJiJ©— ^*©S52^<7y — 
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© L fcflMMHc:*, J&l" 5 m 2 7 ^ - 9 ®m Sr mTlE 

«fc iXWUmZMlkftW L-CW^^ffF-ffiffiro^^b* 
&ftW«fc£&5£U I©*!lUfcff*ffilc»){;t5f 

[fg9§©i¥«aftfft9§] 

[0 0 0 1] 

[0 0 0 2] m^rmzfi % * >y±- *J4>l&H£k '&%\Z. 

^^xmcmzm^^m&m^zkkm^tkm^xm 

V^^®Bt#fi, DES (Da ta Encrypt 
ion Standard) tWtl5«|7 , D-7 

v 1 ) tSt#3t m-flrlkik<D* y±— v?) ib 

f±, ti^oTV^JCJH* (rendund 

ancy) ^fllffi $ix^> r i: 

[000 3] CI aude E 1 mw o o d Shan 
n o nli, "Co mm unication Theo 
ry of Secrecy Systems" (Be 
llSystem Technical Journa 



1, 28#4-5§\ 1 9 4 9f, 6 5 6-7 1 5) k^O 
fmX<D^X\ WX (Bf &4t1fo<Z>* yfe— >4S}foT^ 
S7Cft't±^:M.x.(c< <i"51SifeSr, confus ion 
idif fusio n©2o©S*W<caftt^SL 

[0004] confus i onilt W-Xk Vfe^X<D 

5, Mi: LTfi, ¥-X<DT/i'7T'<-y hn&X^&ffcfk 
XV>T/\>yT<v hO#X^»J&f4tt54!4*«HK2: 
LT1$1 5 ^ ( s u b s t i t u t 

ion), # 5 fc3„ d i f f us i onttt, T^CWTC 
9&*m^X±mz&i?Z>~kX3bZ>. MirLTtt, ¥ 
X<a:£^<Offi#£{g§rtfe;t5*ES ( t r a n s p o s i 
t i on) A 5 $>2)o 

[0 0 0 5] mZifj&^tcDE SiZii^Xh. n^itfe 
Sf±, S-boxt IfpfiHS consuf ion <D®M 
iP-bo d i f f u s i o nfeJiSrS* 

[0 0 0 6] fi^, DESWtMttLX, AES 
(A dvanced Encryption Stan 
d a r d) ^fins&tftfft^gsiilS^o y>?i%%<n 

tX> confus iontdi ffus ion f£t>§r 
M^Z.J}&&t>&:$.ih,X^Z 0 

[0 0 0 7] Mx.fi, d i f f u s i o n(£>f!)#£r-r.5 

MD S (Maximal Distance Sepa 
r a b 1 e) ffi^&fUJB Ufc*WK3EiftB*s«3e$*VT^ 
•So (Vincent R i j m e n , Joan Da 
e m e n, "T he Cipher S HARK" , F 
ast Software Encryption, L 
NCS 103 9, 99-112, 199 6 C ) 

[0008] z.<DMDsn^mm Lfc^^msti, 
[0009] m&m&ikkfoMmmmuft-<D&m%im 

*f-t- 5 Sf fc 4 Mitt i: fi ft b 4 v \ 

[ooio] Mx.fi, m^mmm. mmmm. ^mm 

ftMmm. ttm*«6K:»UTft£fcfc5J:5» S-b 
o x SrWRfriro^^rHS^-toflit LT^t+i-5*ife 

»/«IW?6c»fw»l,-c^t^S-b o x©-Mftj , 1 
9 9 8*Em^-kffin±*=. !)r-f ->vtK^^A, 2. 
2 . C , 1 9 9 8^,) 

[0 0 1 1] »M**»C»LTSc^»Ci-5fc». 
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TS-b o x*ffij&1~ZJ7W;tf&m£KX\,^ e (M. 
Kanda et a l. , "E2 — A New 12 
8-Bit Block Cipher", IEICE 
Trans. Fundamentals. , E83 
-A, 1. 48-58. 2 000. ) 

mmmtmmmmzM-rzttmt lti±, s-b o x 

mzM-fZttWib Ltll ±i S-boxWW 

[0013] md sn^mm \.tcm^mmm^ffnt 

£o MDStT?iJcD^?iJ^^^-t-^^^tr^§Tt L 
T, mffiST'tCffi^^ttT^-St^OCsJli, AESii 
T-fc£R i j n d a e 1 Bf-^tCjott S l£fr2r£r i LT 
ti, M D S trJlJ Sr^-^/WV -y y~T y 'T'xn^r^^ 
©7=— y/Vf--r <t5lt, MP S ftmcDftM 

It'tSCi:, ^fos o 4f c% IDD< AE S^tt-efo5 
Two f i s hf^fCfcltSfSfr^frt LTfi, MD S 
tr?lJC0E^T-ffl^bttTV^PHT (Pseudo-H 
adatnard Trans forma t ion) t<0 
m&frb. MDSfr^J^^^ilLT^ST'y 

[0 0 14] o£9, MDStf?UcDff?iJS*(Dil 

T-fc5, CTfl-fi, PHT/it\ \&<DmmifV ^7- -i? 

mXTiffo^X ^CDT'fcofcc Ri j n 

d a e l R£#©I£ff *£r#a 9 J;5tc, 8 t" y r- :/ «=> -fc 
y-9-±T*fi, rf^mW-^— 7/WUy y- T s/r-trtift 
<-, 7'n-fes'-^©3S«»g[-^ssa^^«fcoTll3gi-5 

[0 0 1 5].fE*OJ:5»=, S-b o x i:MDStT?i]£r 
SiJ* OlSfr^tr i , S - b o x &ffin&±& 
SriSfcSfcJtxO^fhSr^tuTVSJctA^tJ^-f, MD 

[0 0 16] Wilf, S-b o x«rm*5«tt«$i*H 
Set Lt^at^r tT'^^+t^iS^J: p t-TSS-g-S: 
%x.5„ Wx.fi, n tf y r-cOAtH^SrfSoS-b o x© 
AtB^SrGF (2") ©Tci^&U S-b ox 



&GF (2>i) A^GF (2i) — 0>H&£ ^5 t # . 

ft, rsNAKEBt#Ott^^J 1 9 9 8^Sf-§-i 
y 7^ v'VzKv'^A, 7. 2. C, 1998 

[0 0 1 7] HtmWSrattSfcifcte. S-box?ri 

(2») ©ft»flH&te-&*?*v*iS, CTx.fi, fc'yKT? 

5 0 r<D«^-, S-b o xfi, IMRw^tSBBScfci:* 
#Mg5£t L.T*^L^*s-f-3.i:*57?#5 0 •? , GF 
( 2 n) ©ftft*£i ttllKfc** 5 r. t 

[0 0 18] "CD S-b o xtC^<MDStr?"J 
755, ^cDA^JCO*5,i: LT, S - b o x cotn^jcDG F 

(2i) W*atlSIC*5lSr«ffl-f 5*&K1«:. MD S 
if?iJcotf?iJ^3Sds*3S^tv5|gSfi, S - b o x 5r*m 

SS-iT^l^t'^^coT', S-b o xT'iSgcSrJf ^"Lit 
t>©t tt* b*V\ 
[00 19] troi\ MD SiT^JcOA*©^^, S 
-b o xcotU^cDGF (2n) co^gi t ti^ft-5i§-8\ 
CTx.fi, ITy Har«OS»]34SP5*a-e*'4.5»&^ M 
D StT?iJc?A;^:^TSIHWf'^$' r-BJ^frfeh-S 
^Jfcf7)s-?:p-l?fo57)s, rco©-&, fffts-boxlc 

[0 0 2 0] 0*9, ±CDffcl^fi, 9fd, S- 

b o x iMDSfiW*, ^rtb^tv, »J«03KW-*«-e, 
aS:»c«IM**— ©»JBSr»o-CL*5 t, iSf^, tfh 

[0 0 2 1] iWc, B8»©a*t$Sr*-r9J©*g«i: L 
X , S-botOHJA fcf •> h Sr Atl f -y h oMSt?* 
Lfc*-g-cr)351ct>#x.P 3 ^5o rcotB^fi, Ktt/jtBEn 
Sr-§-x.^rtfi|lL^7) 5 > lis T^7>">=.tt©e 

[0 0 2 2] T^yVv'a.tttfi, A^i^ftLfci^ 
tC, ^•cO^#^tfcJ^©-g ; |5T'f±^<, T-t5fclt, JK< 
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fc h-fZ t "CSS VV7V<? ^->att**a-e# SOXttft 
[0 0 2 31 -©a^fc^XtK S-boxtMDS 

frauds. **i?inm&\^ t'y h(Dfsa^msr^$n--r 

[*W*s»»L.J:5i:-t-5«JH] *3§0Jfi, S-box 
t M D S ff 5U tW\ * (D&m-Xft TRS" * tl 5 fc * . »f 

RH-*SHTt^5fcfcH*>fei"» MD SAW* 
{0 0 2 4] r(D«t 5 fcHJHjfe»w«*TfcS 

uifctft^aa* «t tfsm&asrx * s /<7 * - 9 
a, B^HtSEg. *siv«*«it 

7 — * tc <fc K> W^-SC'D&X^ZSmjC^lCiiv^ti^ 

tsft^aat, ^2/-?7^-^fc«tt) jp3t(D«-3c*ra 

2^7 / -*««SrS**J«i-5S2/<7 > -#«»*rit 
H5#S2^7^-^#tti:{c«^^T:. Bf^co^fe{c 

t±o xsHfcw-* $ av n t> tiiz.mmm* h mm turns 
- 9 mffi&m&m&vms* 7 *-9t sw&t- 5 

7 * - 9 &£#a t Srfil 

[0 0 2 5] *»W©»*JS2 0>'<7^— *«fc3t' 

tfe^a^HMfeSI 1 a?7 y — * $r^i-5fcft<0^v / 

7 * - 9 mm *&®.±f$.-f z%u<y*-9 mm±^ 

Sfc J: oX^&dty*$;h,5#ISl/*7^ t* 
A7J#S(C «t o X A73 $ ftfcfi^ 7/-?t {C«<5V * 
X> @TS©^fcJ:oTfffliifflSra*W-*i-5H-##a 

ff1-5^l^-?7^-^^«^ffj|5^S©^l/>7^-i? £ 



[0 0 2 6] *?6K©^53(0^7>— 9fc% 

mm*. $£u<7*-9\c£r)¥-X<n&li:ttm<Dtt 

^X©#^IH]Sr«»-t-5tt*«iat*tT5i!ifliO» fS 
m^aOHulE^ 1 7 ^ — * £&5£1-.5 tctb<D-><7* 

7>-^ft«SrIMt5fl/-!7>-^f«f 

- 9 mffi$n&^& ic«t o x m®.*-& £ *t 5 is 1 7 y - 

^7^-^^«i:(cS^^x, f«©*tttJ:otff« 

iktmt * *x> » h titzwmm* *> mm tnwmw. * 

r.©»sufciMMfiw»iSi-5»i^7^-4'IR« 

J3 «fctfH2^7 ^ — ^#Ht*-ttb-PJT4WES«©JBl^7 

^ - 9 is X t/^2^ 7 9- — 9 t fcJTT 5 7 ^ - * 

©ff?iJSrA77i-SA^^ai, »St»«aa©tT?iJK:St 

liS^ti^ ^*iiH^«*^#aicJ:oXSJ?c 
$ *t 5 *iiH^H£*f K <t o X^tt»Maco=f7?iJ fcffi 
•J ttS Ufc^(DtT?U{cS^^X > pJifcVjjmiz X o Xf¥« 

ft$r^^i-5fm#ai:. Kn-»#a^=toxtf» 

[0 0 2 7], **W©!»*qi5©^7^-*jfc3e*fe 
tt^H^i-^m^ai:, *2^7^-^tcJ:9iFS: 
-^mfttfcot, l^^airKtt^airOffl 

— # foS^tt-t *v t,mir<0'<7 *-9*&:i£-tZ£. 0 \z 

[0 0 2 8] »*qi8©Bt^kSEllf±, ¥SlSrSt 

^^^ixSl^tt^atcffl^^HS^^y 
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[0 0 2 9] Sfc, tf*3S9W«^gSfi. 8£^:££r« 

[0030] instttMoatttt. vav^mmm^m^b 

[0 0 3 1 ] ZixKX *> , Pf #fldS«* fc«±«*««fc: 

i^m<omm<omm m i mmmm 

[0 0 3 2] «T, HffiSr#«l,**st>»W«>3llS©J» 

[0 0 3 3] Blfc, *»W©-Se»J»«Sfc«5, 
tjJWtiS-b o x{c*)-L.T*ii^MDStT?U5r^:Si-5 

[0 0 3 4] HIl l:*$Ji5J;5lc, **SMD StT^J 
fcj£^B»i. S-boxft#*a (10 1) irMDSff 

(102) (l . 

03) tftSMDS^JSt^S (1 0 4) ir^fc 
[0 0.3 5] 0 2 l±» *HJ6ff$fille: «fc 5 3?«#fT 9 

[0 0 3 6 ] Sf, S - b o x 

«*1-©i£BK:.fc^>-Cifc56£;h,fc, fc5S-box5:Sg 
1-5tt«$rSftAtbS (2 0 1) o 
[0037] S-boxIt — &fCfi % mfc'j/ hA^n 
t'y htli^©?ifii5 0 S-b o x©IEig(i, £*©£ 
b KAXmztt Lt £*© J: 5 ^tU^ffl^oi^^i-* 

f^T-feS, ::m v^Ttufd-e-J;, s-b ox fc— S 

[0038] MDstT5>j«*i4j«#stt, mm 

5-£irfcS - box irS^MSMD Str?iJ©#ltt 
Sr, 4fejsJE-f-S (2 0 2) G &td. fc-MrWMH- 

MDStf5iJ^«©»-g-&©«3tS (fMHt) SrtfJI-rs 
(2 0 3) e fcld, SfT^ffi^ft^cD 
iit-fc^A^ii'^ta (2 0 4) „ tu £fc\ 



3&ffc^^«*s#fti-5^tci± s 201 ©*aa*cM 9 » 
*rfcfcMDSfT^J©«*t«:£ritt-*,,- I5LT> 

[0039] rrr% m.tt<nm$&&tte, s-b ox 
tMDs^ij^tt©ia-e"&(c*j-r?) : a$ts©ig*x% s 

-box**. MDSffyiJ¥fr©««MtT?.l«C<, -t© 
Wt©a^t-#i LTWffiLfc#^-©«$iSX*fo 
3. JWWSfc. Sffililt?fc5S»S©«iIi: UTtt, s- 
b o x#n tr'.y bA&tKDigrG; S-boxOAffl*?: 
GF (2n) co5ci LX&&t?> . S — b o x ©A 

[0 0 4 0] g"J©^$tS©^Jt LT»±, GF (2") © 
5c<h UT-Ctt/JK » fc> hftl-Bf <b Lt^fe^, S- 
b o x ©A^» f y I- \z iSSaST-MD S fT^li©^ 

b*mmi'tiw&am* t zw&hhZo 20 

tt^s-box 1 3Kt*Sti.fc«S:©MD SffjF5«« 
U ^©MD Sfr?U£l*t£r&SftM 

d strait L-cftjrr 5 (205) „ z.<om&* mmrn. 

©Sr^K-rSo 

[oo4i] r rr-ii, warnt u-c«»s:«»v#»f 

[0042] B3H:, <fc <9 i¥*0{-**J£^ffi©^S©St 
;ft,£3H-|2n?£>3„ 4i\ S-b o x©A*^tT*?tt?. 

(3 0 1) „ -OA^l^tufcS-b o xJcifcttSHi^jSr 
A^T*^bfe^-3STtSr**-5 (3 0 2) . MDS 
n?U©tT?iJM»^«i: LttO 5 5te«rdfcj*i-S (3 0 
3) „ MDStf^iJWtt^Jg^Wirfi, MDSfr?Ud5G 
F (2i) ±©tT?i]T*fo^tf, GF (2") ©TC-SrJi* 
tC^J5Ki-^tf«tV\ 0»i, GF (2») ©7£-Cfo5d5. 

^©T% 0?r*|!)A>f)i^Ut4^Lr'bj;V^ 
[0 0 4 31 s-box©ffi^jtc, z.<D'rrmmm 
«l«Sr*3lL.fci»*JwOV^-C. S-box©it!MA^ 
T-^Ufc#3l^:^*©-5 (3 0 4) o c©#JSS;(cSo* 

^S5rffSi-5 (3 0 5). 
[0 0 4 4] ^$SSt LT(4> S-box»A^S- 

b o yL(D&t)bmmmmm<Dmw&^*GF (2») 

©Tci^fcUT, S-boxOA^O#?S;tLTSi| 
©^ftt-o^Tfi, '&X\ m4&£TfiW\5\C&^xm'ffl 
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Xi>&\,\ #J©, 1g?gg<D0iJi: L.TS4, &mft<D 

jit LTtii^< , tfy MWt-C. f" y h £ At) t' 

y b^m^xm^tLm^^m^x-oxmmm^ 

if© 4 5 ***ifel=«i-5 ££tt£itj&1- 5ii^Ste 

[0 0 4 5 ] *^»J©tT5iJ»*«l«*ffit-*-5*> 
£*>£¥iJ5gi-5 (3 0 6) o *fc. S'JO^dSffffi-r-S 

»4, fr^BJM^©**»&^*fi*©4jS*«:»*U 
MD Sff?"J«IMSr^i-5 (3 0 8) „ 

[0 0 4 6 ] r©Ki, ^TcDtf^M*^M<offi-g-e-»-J; 
oTMDStf?"Hfc*t5:£j«i-5i»' **fc#< ©Mt 

StefcW:, 3 0 5 ftt»LfcSliSl:fot, «[*!££© 

x\ ®m&<&m&t(o*:ztt:MDsftm&mm-tz>zb 
■b^tg-^fos (307) „ z.<dwt£. Mi>sn^m¥s<o 

dfcj*M\ r ©&!> i&SjxfctrWKJUiJIIIof^btfWS! 
m&M$l-t- : i>Zb\Z.£'oX±l£&tlZ> (3 0 8) «, 

[0 0 4 7] r 5 LTdb&$*t;/tMD Stf^W 

HPfc, MDSfT?St*o-CI»^5*»5A»Sr*8^i-.5 

(3 0 9) . CC0fiJ3gtt, MDSnmmW^MVX, * 
O-t-^TCD/hff^iJ^^T'foS r. t Sr5ligi-5 r. i: tc 

«t o xftfrtiZo nzmffifrM d s ff^'j ttebfty, 

IC(4. 3 0 8©*aaKltif 5. &©fr5"J#**i££)£LT 

i^5»s-»4» mmwm%.mm$:?f o o 1 o) „ 

[0 0 4 8] tT?lJ©1*f#fif4. 3 0 6 iCjoVNX**t)fc S 
-box irtT?iJSiil^iW»-&*fwMi-5a«S5r7c 
l:, MD sff5««»»wjRi-5tT?iJ«*4R*o#*fc»-t- 

[0 0 4 9] ietT?iJ$r**5 (311). tL 

X s &ftWKttlsXi>3 1 0i:ID«}CS-b o x tft&] 
©»-g:*OflMtftS:*«>5 (3 12) . 

[0050] ^©*§-3\ ^LTv^sBS^tJaa-^a* 

(4, ht<DS-b o x OJS!t 45 J: 5 
[0 0 5 1] r 5 Lttfefc, MD SffMgW©^^ 



*«e«SrSW-t-5 r. t T% *jgft S — b o x t MD Sff 

jaoa-g-ftSrftjt-rs 013) . 

[0 0 5 2] ±©0SjT-f4, S - b o x iri£tr?ij 

tdM-r 5 n$ta * xmm LtdK z n * * is-r a 

t>*TtB-e*>5o -t(&»£\ 3 1 1 t 3 1 2 ro^Hfi^BS 
T*# s 3 13T-14, S-boxiMDS^)©li-&W 

[0053] i4ii s-b o xkftmmm&&om& 
zmwi-zmx&z,, s-boxiDAm^^se-yKD 

10, i 1. i 7t*it„ 4 0 2 ©fT^M^MSr 

s-b o x<ottijjizfk&vntemomi)¥ v v*o 0. 

ol, p7i*t, AAtttJASrfPBftGF 
(2 8) ±0>7Gi:jLfcU *<9 h/ViStiot, tft 
i = i 7 z 7 +i6Z 6 +» 5z 5 +i4Z 4 + 
i3zHi2Z^+iiz+i0' 0 = 072^ + 0 
6Z 6 +O5z 5 +O4z 4 +O3z3+O2z 2 + 0 
iz + oo* tmVO-Zo ZZX\ z UUfM^iZx 8 
+ x 6 + x 5 + x+ l= 0 ©isx-fes ir-rs,, ?NMt-e 

[00 5 4] «»«(DSiJ(D^ei: Ltli, ffi^t' 

j/K o0, oi, o7, ^CyhftCIt, ^tb 
-etu, A^Jt'y M0, i 1. i 7 cDf&S3£-T?itPl 

«HB^*^©Btt© § Sic fcfeS t JBtoixS. 
[0 0 5 5.1 0 514, S-b o xirMDSff^JOg'&t 

[0056] 501(4S-box, 502 HMD Sff^J 
-C'*m$Hfct£»S5r*L.-CVN?,o Wxl4, GF 

(2-8) ±<DMDsnw<DMx*m.w-rzb. t<Dmm 

»f4. Jim&GF (2 8) ©5t.T*fc-5o #S-boxffl 
ttl^H4, r©J£tfcg£ili©-r?.r.i:!c4;oT, MDStf 
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